Is CVE-2026-78037 being exploited?

No public exploit is currently tracked.

How severe is CVE-2026-78037?

CVE-2026-78037 has a CVSS v3 severity of HIGH (8.8).

Back

CVE-2026-78037

Description

Xiiaozet LK100W is vulnerable to OS command injection through its web-based management interface. An authenticated attacker may be able to execute arbitrary operating system commands with elevated privileges, potentially resulting in unauthorized access to sensitive information or complete device compromise.